tag:help.masterpassword.app,2014-09-03:/discussionsMaster Password: Recent Discussions 2019-03-21T16:05:51Ztag:help.masterpassword.app,2014-09-03:Discussion/188366702019-03-21T07:20:29Z2019-03-21T07:20:31ZAbout IOS version and Android version<div><p>The version I use on my iPhone is very convenient, he can display and save all my passwords. But when I changed to the Android version, it was very different. It could not save and list all my website names and passwords. And when I enter the website name, the password is different because of the type problem. I can't remember the type of all my passwords.Is there a better version or solution on the Android phone? THX</p></div>xutag:help.masterpassword.app,2014-09-03:Discussion/188353422019-03-20T10:34:04Z2019-03-20T10:34:07ZI need to save a given password, not to generate one<div><p>As the title says, I need to save a given password, but when changing the password field type to "saved", all the options for the site become unavailable - including the edit options, basically preventing me from saving a custom password (or even deleting the site entry altogether, since it becomes useless).<br>
This is happening on the desktop (java) version 2.7.10</p>
<p>Any advice?</p></div>Catalin Bitatag:help.masterpassword.app,2014-09-03:Discussion/172521072017-07-21T09:18:27Z2019-03-13T14:05:12ZPassword type: 6-digit-PIN<div><p>hello !</p>
<p>I have exactly the same problem !<br>
French banks frequently ask 6 digits password, sometimes they ask 8 digit password ..<br>
Some other websites ask for such passwords, as well as phone PIN ..</p>
<p>it would be so nice to be able to set how many digits does a PIN password have.</p>
<p>Except this, MP works very fine ! Great job,</p>
<p>Bat</p></div>BBtag:help.masterpassword.app,2014-09-03:Discussion/188219932019-03-09T18:13:20Z2019-03-09T18:13:21ZJul<div><p>Hey is masterpass app down ?? It&#8217;s keeps crashing</p></div>Kaletag:help.masterpassword.app,2014-09-03:Discussion/188176742019-03-06T18:50:37Z2019-03-06T18:50:40ZiOS FaceID and AutoFill passwords<div><p>Hi!<br>
Any plans on adding support for iOS FaceID and AutoFilling passwords with Master Password?</p></div>RandomDudetag:help.masterpassword.app,2014-09-03:Discussion/184492552018-08-12T00:45:05Z2019-03-04T20:00:34ZWhat happens when I need to change my password (e.g. on a website)?<div><p>@Steve: I have an account that require a new password every month. So I set the counter like this: yymm, e. g. 1901 for January 2019, 1902 for February 2019 and so on. You can use the counter with your own system and for your needs. So it is not so hard to find the right password with one or two tries on a other or new device.</p></div>Mariotag:help.masterpassword.app,2014-09-03:Discussion/188143242019-03-04T19:28:04Z2019-03-04T19:28:09ZMasterpassord JAVA (Desktop) Version<div><p>Hi Developer!<br>
Is it possible to start the Java-Applications with arguments or options or parameters (e.g. User, Incognito, Password Type, Counter, Algorithm and Login Type). I want start the Desktop-Version directly into Incognito-mode with the help of an argument. I have also payed your iOS-App.</p>
<p>Thanks a lot,<br>
Mario</p></div>Mariotag:help.masterpassword.app,2014-09-03:Discussion/188099402019-03-01T01:06:09Z2019-03-01T21:46:18ZUsing masterpassword from two devices<div><p>Hi Vitor,</p>
<p>When creating Master Password, one of the primary goals was to create a password app that does not send private information over the Internet. As such, your Mac does not send your newly added sites to your phone over the Internet. Anything you create in Master Password stays on your phone (or computer) and doesn't leave it.</p>
<p>That said, the beauty of Master Password is that if you add, for example, twitter.com on your Mac first, and are later looking for its password on your iPhone, all you need to do is look it up on your iPhone, create it, and the password will be the same as the one on your Mac, even without sending this private information over the Internet.</p>
<p>To make a long answer short: your phone's new site will not automatically show up on your mac, but just add it to your mac the first time you need it and the right password will automatically show up.</p></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Discussion/187583272019-01-25T22:39:44Z2019-02-27T17:24:54ZmacOS version resets when trying to change password type<div><p>I have the same issue. The issue seems to be turning up irrespective of website or type as mentioned.</p></div>Rishal Rajtag:help.masterpassword.app,2014-09-03:Discussion/188077352019-02-27T16:11:29Z2019-02-27T16:34:15Zmultiple accounts for same website<div><p>Awesome, thank you!</p></div>avonlea.fotheringhamtag:help.masterpassword.app,2014-09-03:Discussion/186770002018-12-04T13:30:37Z2019-02-10T00:06:06ZMasterpassword, we need a user manual!<div><p>Help there is a picture on my phone that needs a master password. I do not know how to get one. Now on my smartphone there is a factory reset warning. What to do I only have 2 more turns to put in something</p></div>Betty smithtag:help.masterpassword.app,2014-09-03:Discussion/187729012019-02-04T18:18:18Z2019-02-04T18:18:21ZMain interface<div><p>Hello,</p>
<p>atleast on a mac version, using it on 13" screen, the whole layout seems to waste alot of space. With the generated password using 1/3 of horizontal space and everything else seems crammed under.</p>
<p>In full screen on a 13" screen, in the list i get 10 sites, but top part of the screen is mostly empty with the generated pass.</p>
<p>It gets really crammed when in windowed mode.</p>
<p>Maybe little more relative/dynamic positioning?</p>
<p>Keep up the excelent work!</p></div>Ttag:help.masterpassword.app,2014-09-03:Discussion/187728912019-02-04T18:08:29Z2019-02-04T18:08:33ZmacOS, login name, scrolling<div><p>Hello,</p>
<p>I am using the latest version (as of today, 4th feb.), on macOS 10.14.2.</p>
<p>I have one issue and one cosmetic hiccup:</p>
<ol>
<li>
<p>It took some time for me to figure out, that I need to hold SHIFT during pressing ENTER to copy the login name. But the problem is, the copied login name is NOT the configured one. The copyed login name looks like some random phrase words. But not my login name, configured when the site was created.</p>
</li>
<li>
<p>When I have multiple sites added, the scrolling animation is very very choppy, when using touch pad to move. If using arrow keys, it works and looks as exptected.</p>
</li>
</ol>
<p>Keep up the excelent work!</p></div>Ttag:help.masterpassword.app,2014-09-03:Discussion/185651052018-10-09T13:17:55Z2019-02-02T09:34:41ZUnofficial android app <div><p>Hi!</p>
<p>I take this Post out...</p>
<p>So, the App in the Playstore isn't the official App? And why you don't publish your Version in the Google Play Store?</p>
<p>best regards</p></div>Fredtag:help.masterpassword.app,2014-09-03:Discussion/187493822019-01-20T05:30:56Z2019-02-01T22:36:02ZResetting Master password<div><p>Hi Stephen,</p>
<p>You&#8217;ll need to be more verbose about your problem description. I&#8217;m not sure what you&#8217;re describing or referring to. If it helps, detail what app you&#8217;re using, what actions you&#8217;ve taken up to the problem point, what you see and what you expect to see instead.</p></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Discussion/187679732019-02-01T07:47:57Z2019-02-01T07:47:59ZMacOS <div><p>Hi,</p>
<p>On MacOS, where does MasterPassword store the master password? I would like to know for various reasons.</p>
<p>As well, how difficult is it to build MasterPassword for MacOS from source? Are there any notes or cheat sheets regarding versions of libraries required?</p>
<p>Thanks,<br>
Peter</p></div>peter.r.fifetag:help.masterpassword.app,2014-09-03:Discussion/187640092019-01-30T08:37:18Z2019-01-30T08:37:19ZPlease list versions of the program somewhere<div><p>Hi,</p>
<p>If I start the app, I can ask the app what version is running. There is no way to check for an update. I also can't find the latest version of the application anywhere (including on the masterpassword.app site - or in github).</p>
<p>Can you please list the latest version somewhere easy to find. I'm sure you'll say "it will notify you", however, that doesn't help me confirm. Sometimes, apps are blocked (eg. Thor Heimdal has a habit of blocking apps).</p>
<p>Thank you</p></div>Robert Menziestag:help.masterpassword.app,2014-09-03:Discussion/187593822019-01-27T12:30:04Z2019-01-29T05:47:33Zmissing parameter in algorithm specification<div><p>Hi Marten,<br>
thanks a lot for the explanation.</p>
<p>best Regards<br>
Peter</p></div>huebner_ptag:help.masterpassword.app,2014-09-03:Discussion/187573822019-01-25T10:11:18Z2019-01-25T20:24:10Zlength of master password for maximum security<div><p>The larger the entropy in your master password, the better the security of the whole, yes.</p>
<p>Adding "special characters" is generally not a good way of maximizing entropy. The most reliable way for maximizing entropy is just making your master password longer. This is why a good way of making a really strong master password is to use a phrase instead of a word. If you make a little sentence, even one that makes no sense, and it'll be much easier to remember as well as being extremely high in entropy. Examples:</p>
<ul>
<li>banana coloured duckling</li>
<li>seventeen red ravens flying high</li>
<li>...</li>
</ul></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Discussion/187573872019-01-25T10:12:37Z2019-01-25T13:35:32Zlength of site name and security<div><p>No, the site name length is trivial in the security of the algorithm.</p></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Discussion/187280942019-01-07T06:08:11Z2019-01-25T10:06:31ZLost passwords<div><p>What is the length of maximum security master password ?<br>
and does the length of the site name have influence on the security of password ?</p></div>Garytag:help.masterpassword.app,2014-09-03:Discussion/187565382019-01-24T19:15:10Z2019-01-24T19:56:54ZUpdating<div><p>Very interested- cheers!</p>
<p>Both apps are very stable, this is true. Its more just so I can keep up with the tech as it progresses.</p>
<p>Thanks for your fast reply</p></div>milesmcclanetag:help.masterpassword.app,2014-09-03:Discussion/187526362019-01-22T16:35:04Z2019-01-22T16:35:08ZWin10 does not open .jar file, Java does not help<div><p>Hi there,</p>
<p>I wanted to install the programm at my PC (win10). I downloaded and saved the installation file, but I cannot open it (.jar). I downloaded Java to open the .jar file but still it does not open. Any ideas how to fix the issue?</p>
<p>Thank yo very much!</p></div>Hanstag:help.masterpassword.app,2014-09-03:Discussion/185477042018-10-01T08:30:20Z2019-01-25T05:47:39ZCan't delete a site<div><p>Hello, How did you manage to delete the site? I am using V 2.7.10 on linux.</p>
<p>BR Chris</p></div>mailtag:help.masterpassword.app,2014-09-03:Discussion/187477122019-01-18T19:40:43Z2019-01-18T19:40:45Zsystem requirments<div><p>Hi I am not sure if this is posted somewhere but<br>
what are the basic OS requirements?</p>
<p>I am still using Snow Leopard-- will your software work? Thanks!</p></div>John Doetag:help.masterpassword.app,2014-09-03:Discussion/187434592019-01-16T11:38:40Z2019-01-16T13:16:54Zweb app<div><p>I am reffering to js.masterpassword.app, but I thought there is way to keep all used masterpassword.apps synced, since in your iPhone app is a function for exporting, as well as in the masterpassword app on my Mac. And I&#8217;ve sent this .mpsites file between my devices to get the same results, calculations, call it how you want.</p>
<p>This is why I thought it will be same with your web.app.</p></div>Francesco Tarallotag:help.masterpassword.app,2014-09-03:Discussion/187350672019-01-11T03:23:27Z2019-01-11T03:23:28ZMissing profiles<div><p>Windows 10 | lastest Java Environment | lastest Master Password (.jar)</p>
<p>Last time, when I opened master password-gui.jar on Windows, I didn't find my profiles. Can you tell me where the program stores them?</p>
<p>My two suggestions:</p>
<p>Master Password should have an option to save as the same local file on hard drive without exporting every time the database has changed. It would decrease risk of losing database when the main jar is corrupted.</p>
<p>Master Password on Android should have an manually typing counter. It would be inconvenient if user have to adjust one by one while they have a large value of counter number.</p>
<p>Thank you for making such great app. I really like the concept.</p>
<p>Ari Tran</p></div>Ari Trantag:help.masterpassword.app,2014-09-03:Discussion/187278532019-01-06T22:11:52Z2019-01-07T00:03:41ZImport/Exchange saved Sites from Windows PC (.jar) to Iphone or Mac<div><p>Tested this on a Mac as well, the json-Format seemingly is not accepted as an import-Format for Masterpassword on Mac (greyed out) or iOs.</p></div>ayumihidekotag:help.masterpassword.app,2014-09-03:Discussion/187256762019-01-04T16:11:43Z2019-01-05T18:50:12ZBuilding mpw-bench fails with error Unknown Typename »u_int16_t«<div><p>Hi Thomas,</p>
<p>Thanks for reporting these standard library compatibility issues with the Blowfish library. Please try out the code from the master branch and let me know if there's any more issues.</p>
<p><a href="https://gitlab.com/MasterPassword/MasterPassword">https://gitlab.com/MasterPassword/MasterPassword</a></p>
<p>Please file any source related issues as an issue in Gitlab so it can be tracked well.</p>
<p>Thanks!</p></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Discussion/187153922018-12-29T09:17:18Z2018-12-29T18:53:15ZThe act of saving accounts in plaintext .json files<div><p>Hi again!</p>
<p>It is of course perfectly natural to feel the way that you do. There will always be a sense that if you give an attacker any information at all, it will help him compared to not giving him anything. It is only natural to feel this way.</p>
<p>In the security world, however, we make a clear distinction between public and private information. Public information is information that is freely shared. Private information is information that is only ever in the possession of the person authorized to perform the action. Cryptographic locks are built such that no matter who knows the public information, the strength of the lock is derived from whether or not the user has access to the private information.</p>
<p>The most important aspect to this distinction is in forcing the algorithm to be designed sufficiently strongly that it must be able to stand 100%, even if the public information is known. Yes, hiding that public information from an attacker will make things harder for him (but in all honesty &#8211; if an attacker is willing to invest resources into mounting an attack against your master password, finding this public information will be a trivial effort in comparison, mpsites file or no). In the end, it's about what Master Password was engineered to guarantee. And it was engineered to guarantee that it can withstand an attack even if you give your attacker all your public information. That doesn't mean you should - it just means you're perfectly safe even if it does happen.</p>
<p>Now, why does the site say the name is integral to the algorithm when I claim that it doesn't contribute to the strength of the lock?</p>
<p>It is true, your name, as well as the name of your site, are inputs to the algorithm. They're not there for strength, they're there for diversification. The site name makes sure that every site has a unique password. The user's name makes sure that every human has a unique master key (with the obviously infinitesimally unlikely caveat of two humans with the exact same full name and exact same master password having a collision). Furthermore, the user's name functions as a seed to the master key's derivation, which is integral in ensuring malign actors cannot compute a large Master Password rainbow table and then sell that table to every attacker interested in breaking in. If you're curious, I can explain in more detail.</p>
<p>There is a risk in knowing a little about cryptography, but not knowing enough to know how little you know. Not to discourage you at all: it's great to be concerned about your security, and great to be critical of any security products, so kudos for asking these questions. But be aware that a little bit of knowledge can be a dangerous thing for bias.</p>
<p>For instance, yes, your name is saved in plain text, but you speak of this as though it forms the basis of an issue. Yes, there is no guard by castle's solid outer wall - you can just walk right up to it. But this isn't a problem. The wall as designed such that the interior security is unaffected, even if an attacker is standing on the other side. Master Password was designed to be just fine, even if an attacker knows who you are and what site you use. Without the ladder that is your personal master password, he can go no further.</p>
<p>"Stay Resident" means the app stays open in the background, so that when you hit the hotkey (cmd-alt-p) it re-opens without the need to log in again. This could probably be made more clear in the interface.</p>
<p>I agree that there is definitely room for improvement in communicating the intricacies of Master Password's security properties, but realize that this is a complex topic, and any such communication would need to either be surface level (it's safe, trust me!) or needs to go as far as breaking through the bias of insufficient knowledge - and I can't exactly write up an in-depth cryptography course. It's a challenge! Thanks for your input, though.</p>
<p>Don't hesitate to let me know if you have any further comments or thoughts on this or related matters.</p></div>Maarten Billemont